My general answer is "no". But the question also isn't meaningful unless you define what it is you're trying to protect. (E.g. maybe it's reasonable to have a

My general answer is "no". But the question also isn't meaningful unless you define what it is you're trying to protect. (E.g. maybe it's reasonable to have a captcha of some sort for account creation, with fallback to a human-involved process. But if you're trying to prevent credential-stuffing on a login form, the correct approach is using the Pwned Passwords dataset and/or cooloffs.)